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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . ^ This communication is responsive to the response filed on 1/20/2009 . 

2. The allowed claim(s) is/are 1-21 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b)DSome* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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4. □ Examiner's Comment Regarding Requirement for Deposit 

of Biological Material 
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6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

7. ^ Examiner's Amendment/Comment 

8. ^ Examiner's Statement of Reasons for Allowance 

9. □ Other . 
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DETAILED ACTION 
EXAMINER'S AMENDMENT 

1. An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

2. Authorization for this examiner's amendment was given in a telephone interview with 
Lawrence A. Baratta Jr. on 1/27/2008. 

3. The application has been amended as follows: 

Claim 1 (Currently Amended). A system for tracking location of a wireless device, the 
system comprising: 

a system data store capable of storing one or more tracking criteria and indicators of one 
or more wireless devices to track; 

a set of one or more wireless receivers on one or more wireless sensors; 

the wireless sensors monitoring wireless header information from a wireless packet 

frame; 

a system processor in communication with the system data store and the one or more 
wireless sensors, wherein the system processor comprises one or more processing elements 
programmed or adapted to perform the steps comprising of: 

(a) identifying a wireless device for tracking based upon a combination of dynamic 
operational and security assessments derived using data from the system data store, wherein the 



Application/Control Number: 10/774,034 Page 3 

Art Unit: 2617 

dynamic operational and security assessments identify the wireless device for tracking 
responsive to behavior of the wireless device, wherein the dynamic operational and security 
assessments comprise wireless signature-based tests, wireless protocol-based tests, wireless 
anomaly-based tests, and wireless policy deviation-based tests, wherein the policy deviation- 
based tests comprise a deviation from a set of [[one]] three or more wireless policy settings 
comprising wireless channel settings, wireless authentication settings, wireless encryption 
settings, SSID broadcast settings, and rate settings, and wherein the policy deviation-based tests 
ensure the wireless device is complying with the one or more wireless policy settings; 

(b) receiving data from a subset of the one or more wireless sensors; 

(c) storing the received data in the system data store, wherein the received data is utilized 
to update wireless statistics used in the dynamic operational and security assessments, wherein 
the wireless statistics enable the dynamic operational and security assessments to detect both 
unauthorized wireless devices and authorized wireless devices which are displaying anomalous 
behavior; 

(d) calculating the position of the identified wireless device based upon the stored data; 

and 

(e) outputting the calculated position. 

Claim 19 (Currently Amended). A method for tracking location of a wireless device, the 
method comprising the steps of: 

(a) detecting a wireless device utilizing one or more dynamic operational and security 
assessments, wherein the one or more dynamic operational and security assessments detect the 
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wireless device responsive to behavior of the wireless device, and wherein the dynamic 
operational and security assessments comprise wireless signature- based tests, wireless protocol- 
based tests, wireless anomaly-based tests, and wireless policy deviation-based tests, wherein the 
policy deviation-based tests comprise a deviation from a set of [[one]] three or more wireless 
policy settings comprising wireless channel settings, wireless authentication settings, wireless 
encryption settings, SSID broadcast settings, and rate settings, and wherein the policy deviation- 
based tests ensure the wireless device is complying with the one or more wireless policy settings; 

(b) adding an indicator associated with the detected wireless device to a list of wireless 
devices; 

(c) selecting a wireless device for tracking based upon the list of wireless devices; 

(d) receiving data from one or more wireless sensors, the wireless sensors monitoring 
wireless header information from a wireless packet frame; wherein received data is utilized to 
update wireless statistics used in the dynamic operational and security assessments, wherein the 
wireless statistics enable the dynamic operational and security assessments to detect both 
unauthorized wireless devices and authorized wireless devices which are displaying anomalous 
behavior; 

(e) calculating a position of the selected wireless device based upon the received data; 

(f) outputting the calculated position; 

(g) repeating steps (a) and (b) upon occurrence of an event or at periodic intervals; 

(h) repeating steps (c) through (f) upon occurrence of an event or at periodic intervals. 
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Claim 21 (Currently Amended). A system for tracking location of a wireless device, the 
system comprising: 

storing means for storing one or more tracking criteria and indicators of one or more 
wireless devices to track; 

one or more wireless sensors for scanning wireless traffic; the wireless sensors 
monitoring wireless header information from a wireless packet frame; 

distributed rogue detection means for detecting a wireless device based upon one or more 
dynamic operational and security assessments operable to detect the wireless device based on 
behavior, wherein the assessments are performed on the received scan data, and for storing an 
indicator of the detected wireless device, wherein the distributed rogue detection means is 
distributed between the one or more wireless sensors and a host system; and 

position determining means for selecting a wireless device to track from the indicators in 
the storing means, receiving scan data from one or more wireless receivers, estimating the 
position of the selected wireless device based upon received scan data and outputting the 
estimated position; 

wherein the dynamic operational and security assessments comprise wireless signature- 
based tests, wireless protocol-based tests, wireless anomaly-based tests, and wireless policy 
deviation-based tests, and wherein the policy deviation-based tests ensure the wireless device is 
complying with the one or more wireless policy settings; 

wherein the policy deviation-based tests comprise a deviation from a set of [[one]] three 
or more wireless policy settings comprising wireless channel settings, wireless authentication 
settings, wireless encryption settings, SSID broadcast settings, and rate settings; and wherein 
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received scan data is utilized to update wireless statistics used in the dynamic operational and 
security assessments, and 

wherein the wireless statistics enable the dynamic operational and security assessments to 
detect both unauthorized wireless devices and authorized wireless devices which are displaying 
anomalous behavior. 

Allowable Subject Matter 

4. Claims 1-21 are allowed. 

5. The following is an examiner's statement of reasons for allowance: 

Claims 1, 19, 20, and 21 are allowed because the closest prior art, Challener (Pub. No.: 
US 2003/0186679) in views of Zuk et al. (Pub. No.: US 2003/0154399) and Campbell et al. 
(Patent No.: US 6,893,850), either alone or in combination, fail to anticipate or render obvious a 
system, computer readable media, and a method for tracking location of a wireless device 
comprising one or more wireless sensors, the wireless sensors monitoring wireless header 
information from a wireless packet frame, wherein the policy deviation-based test comprise a 
deviation from a set of three or more wireless policy settings comprising wireless channel 
settings, wireless authentication settings, wireless encryption settings, SSID broadcast settings, 
and rate settings, in combination with all other limitations in the claim(s) as defined by applicant. 

6. Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 



Application/Control Number: 10/774,034 
Art Unit: 2617 



Page 7 



Conclusion 

7. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure: Zavidniak (Patent No.: US 7,068,998) discloses a methodology for the detection of 
intrusion into radio frequency based networks and Bruton, III et al. (Patent No.: US 7,076,803) 
discloses intrusion detection services. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MARIVELISSE SANTIAGO-CORDERO whose telephone 
number is (571)272-7839. The examiner can normally be reached on Monday through Friday 
from 8:00am to 4:30pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Vincent P. Harper can be reached on (571) 272-7605. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/VINCENT P. HARPER/ 

Supervisory Patent Examiner, Art Unit 2617 

/MARIVELISSE SANTIAGO-CORDERO/ 
Examiner, Art Unit 2617 



